Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F1D9EB2A0D2E11F08101A25B762E951A.roa
File: F1D9EB2A0D2E11F08101A25B762E951A.roa (raw, json)
Hash identifier: wkFKJHjBhCBL3V2MDj9U+R9pHq0cZYCq288ghTRwt9s=
Subject key identifier: 10:1D:CC:C7:86:24:C4:D3:DB:F0:47:CD:75:E1:EC:36:88:C7:2E:AE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01492E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F1D9EB2A0D2E11F08101A25B762E951A.roa
Signing time: Sun 30 Mar 2025 06:19:33 +0000
ROA not before: Sun 30 Mar 2025 06:19:29 +0000
ROA not after: Sun 04 May 2025 06:19:29 +0000
asID: 61112
IP address blocks: 45.196.215.0/24 maxlen: 24
45.196.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 28 Apr 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84270 (0x1492e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 30 06:19:29 2025 GMT
Not After : May 4 06:19:29 2025 GMT
Subject: CN=67e8e274-f64a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:0a:9c:70:92:d9:36:c1:17:0b:cc:2a:5f:52:
56:35:9a:da:43:22:f9:1a:1f:45:03:a8:bb:2c:e2:
d0:32:42:69:84:12:ee:cd:e0:f3:f3:74:0b:28:e8:
b6:c4:4e:b7:7d:6b:d2:f2:12:86:e3:33:c1:20:9c:
a7:d9:89:ca:16:95:dc:96:fe:c8:9c:06:ee:ae:b8:
b0:2b:1c:e4:bd:dd:e3:b5:84:e1:9b:df:a0:4a:dc:
82:17:ac:f0:3d:aa:2d:b3:08:fa:bd:9a:cf:49:70:
25:2d:6d:64:d6:af:e6:2b:23:7e:2f:f9:2f:e0:10:
99:7c:df:b9:5a:71:bf:e4:e9:64:40:97:a7:8d:02:
ef:32:3d:1d:ae:d9:b2:50:74:55:b5:d2:42:28:ba:
1f:b2:db:5d:a0:f5:b8:aa:2c:53:7c:b7:76:d4:55:
32:8b:24:78:c4:6f:07:44:b6:8b:3c:34:cb:9e:e1:
2c:4d:e4:62:0a:42:7c:1b:00:53:73:3f:40:08:c0:
13:7c:7e:6f:87:39:80:6f:4f:49:0e:03:7d:e6:4a:
8f:bb:44:b7:dc:da:2b:b5:b9:3c:ce:51:f6:e3:14:
62:5b:3a:6a:a5:8f:b1:4c:0f:d6:56:24:49:c2:d6:
84:da:aa:30:95:77:a2:cd:fd:c5:e7:7b:17:ac:e8:
42:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:1D:CC:C7:86:24:C4:D3:DB:F0:47:CD:75:E1:EC:36:88:C7:2E:AE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F1D9EB2A0D2E11F08101A25B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.215.0/24
45.196.222.0/24
Signature Algorithm: sha256WithRSAEncryption
59:56:81:36:73:2c:3e:64:e0:83:c1:b8:8c:0f:46:7f:39:ff:
aa:00:fb:39:f0:2a:63:24:94:f4:ed:99:6e:c9:1e:40:8f:06:
d9:11:fe:4d:8b:14:e5:b4:d5:07:39:be:29:da:1b:90:6c:58:
da:af:1d:76:9b:c1:51:15:c6:54:dd:66:1c:0a:ed:26:fc:e8:
cd:8d:ec:87:e0:0a:76:14:43:93:a4:eb:22:41:36:e3:1a:3e:
e7:b4:d1:02:13:f3:71:f1:e0:4a:0c:88:c0:d8:1a:3e:bd:47:
f4:30:53:bb:0c:43:d7:76:d8:a7:05:95:41:34:96:8b:2a:ad:
d6:f8:9c:39:46:8f:7f:0e:a7:47:34:10:9b:0b:63:2e:b8:dd:
84:40:32:c5:a1:04:72:39:99:bf:35:05:c7:ac:67:95:00:8f:
b6:23:9f:0a:46:70:ba:74:7c:4d:00:91:25:67:59:70:3c:c0:
4c:60:1a:3d:47:f3:ea:d2:2b:83:b8:87:8e:a1:7f:05:06:e0:
22:e1:d1:e9:d2:36:4b:da:f3:7d:17:53:63:39:25:d2:26:c0:
0f:3d:5d:8d:17:a0:36:46:ee:e2:b3:6f:7d:9d:ed:2a:30:bb:
eb:9c:ac:28:1e:16:02:8f:8c:57:7a:03:4a:62:95:9d:3d:49:
69:c4:f5:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:59:42 2025 by rpki-client